CVE-2018-6622 An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2018-6622?
CVE-2018-6622 is a high-severity vulnerability in n/a, published on 17 Aug 2018.
Official description
An issue was discovered that affects all producers of BIOS firmware who make a certain realistic interpretation of an obscure portion of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.0 specification. An abnormal case is not handled properly by this firmware while S3 sleep and can clear TPM 2.0. It allows local users to overwrite static PCRs of TPM and neutralize the security features of it, such as seal/unseal and remote attestation.
Which versions are affected by CVE-2018-6622?
It affects 1 product.
Products include Trustedcomputinggroup Trusted Platform Module.
How do I fix CVE-2018-6622?
No fix has been published for CVE-2018-6622 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-6622 being exploited?
There is no known exploitation of CVE-2018-6622 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-f9pr-wmfc-hrc3.